User on workstation authenticated as an administrator

Feb 6, 2012 at 11:38 AM

Hi Dears. We implemented WAFFLE with Tomcat 5 / 6 using Servlet filter (Negotiate only protocol). Everything works fine, standard users are authenticated with the same credentials as they log in to the Windows. But there are some users, who have in the AD more than one account, and the second is account with administrative rights. They log into the Windows as a standard user, but WAFFLE servlet filter returns credentials of the user with admin rights. Installed on MS Windows 2003 Server, AD 2003, Tomcat v 6.0.25, JRE 1.6, WAFFLE version: 1.3.5366.0.  Is there a way to configure AD or WAFFLE not to return credentials od admin user ?
Thanks a lot
Tomas Andrasko

Feb 6, 2012 at 9:33 PM

There could be a lot of reasons why this is happening. How do those users logon to the domain and "select" which of the accounts to use?

Feb 7, 2012 at 6:34 AM
The customer says he logs into the system as a "username" and immediately starts web browser and tried log to the web
application. And is identified as "usernameadmin". Then during the day he usually logs to other services / remote
desktops as the user "usernameadmin".

Feb 7, 2012 at 9:53 PM

I would find out how this is setup in Active Directory. Clearly this client has the admin identity otherwise it wouldn't let him do single signon.

Feb 13, 2012 at 12:12 PM
We tried to find difference(s) on the workstation, because when the user logs on another workstation, he is identified
as a standard user. We didn't find any, so I have to close the problem and thank dblock for his posts. It's a problem on
the only one workstation without bindings to the WAFFLE.